CVE-2022-0024: PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit
First published: Wed May 11 2022(Updated: )
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committed on both hardware and virtual firewalls. This issue does not impact Panorama appliances or Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.23; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5.
Credit: psirt@paloaltonetworks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palo Alto Networks PAN-OS | >=8.1.0<8.1.23 | |
| Palo Alto Networks PAN-OS | >=9.0.0<9.0.16 | |
| Palo Alto Networks PAN-OS | >=9.1.0<9.1.13 | |
| Palo Alto Networks PAN-OS | >=10.0.0<10.0.10 | |
| Palo Alto Networks PAN-OS | >=10.1.0<10.1.5 |
Remedy
This issue is fixed in PAN-OS 8.1.23, PAN-OS 9.0.16, PAN-OS 9.1.13, PAN-OS 10.0.10, PAN-OS 10.1.5, and all later PAN-OS versions.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-0024?
CVE-2022-0024 is a vulnerability in Palo Alto Networks PAN-OS software that allows an authenticated network-based administrator to upload a specially crafted configuration and potentially execute arbitrary code with root privileges.
How does CVE-2022-0024 affect Palo Alto Networks PAN-OS software?
CVE-2022-0024 affects Palo Alto Networks PAN-OS software versions 8.1.0 to 8.1.23, 9.0.0 to 9.0.16, 9.1.0 to 9.1.13, 10.0.0 to 10.0.10, and 10.1.0 to 10.1.5.
What is the severity of CVE-2022-0024?
CVE-2022-0024 has a severity rating of 7.2 (critical).
How can an attacker exploit CVE-2022-0024?
An attacker with authenticated network access can exploit CVE-2022-0024 by uploading a specially created configuration to disrupt system processes and potentially execute arbitrary code with root privileges.
Is there a fix available for CVE-2022-0024?
Yes, Palo Alto Networks has released patches to address the vulnerability. It is recommended to update to the latest version of PAN-OS software.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/title
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/paloaltonetworks
- canonical/palo alto networks pan-os
- version/palo alto networks pan-os/8.1.0
- version/palo alto networks pan-os/9.0.0
- version/palo alto networks pan-os/9.1.0
- version/palo alto networks pan-os/10.0.0
- version/palo alto networks pan-os/10.1.0